@see https://www.ory.sh/run-oauth2-server-open-source-api-security.html https://github.com/ory/hydra